amazon-ascs 0.0.1__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
amazon_ascs/__init__.py
ADDED
|
@@ -0,0 +1,43 @@
|
|
|
1
|
+
Metadata-Version: 2.4
|
|
2
|
+
Name: amazon-ascs
|
|
3
|
+
Version: 0.0.1
|
|
4
|
+
Summary: Placeholder registered as proof-of-concept for a security report filed with Amazon's Vulnerability Research Program. Not affiliated with Amazon. Performs no operations.
|
|
5
|
+
License: MIT
|
|
6
|
+
Project-URL: Homepage, https://developer.supplychain.amazon.com/
|
|
7
|
+
Keywords: placeholder,security-poc,avrp
|
|
8
|
+
Classifier: Development Status :: 7 - Inactive
|
|
9
|
+
Classifier: Intended Audience :: Developers
|
|
10
|
+
Classifier: License :: OSI Approved :: MIT License
|
|
11
|
+
Classifier: Operating System :: OS Independent
|
|
12
|
+
Classifier: Programming Language :: Python :: 3
|
|
13
|
+
Classifier: Topic :: Security
|
|
14
|
+
Requires-Python: >=3.7
|
|
15
|
+
Description-Content-Type: text/markdown
|
|
16
|
+
|
|
17
|
+
# amazon-ascs (placeholder)
|
|
18
|
+
|
|
19
|
+
This PyPI package name is a placeholder registered as proof of concept for a security report
|
|
20
|
+
filed with Amazon's Vulnerability Research Program.
|
|
21
|
+
|
|
22
|
+
It is **not affiliated with Amazon** and it performs **no operations**. Installing it does
|
|
23
|
+
not run any code, does not import anything at install time, and does not connect to any
|
|
24
|
+
network endpoint.
|
|
25
|
+
|
|
26
|
+
## Why does this exist?
|
|
27
|
+
|
|
28
|
+
At the time of registration, Amazon's ASCS Developer Portal at
|
|
29
|
+
`https://developer.supplychain.amazon.com/` instructs external supply chain integrators to
|
|
30
|
+
run `pip install amazon-ascs` in its "Install the SDK" step, but Amazon had not registered
|
|
31
|
+
that name on public PyPI. Any first-come account could have claimed it and shipped arbitrary
|
|
32
|
+
code to every developer following those instructions. This placeholder was registered to
|
|
33
|
+
prevent that outcome while Amazon reviews the report and takes ownership of the name.
|
|
34
|
+
|
|
35
|
+
## If you are an Amazon supply chain integrator
|
|
36
|
+
|
|
37
|
+
Do not use this package. It has no functionality. The official Amazon SDK, when Amazon
|
|
38
|
+
publishes it, will come from an Amazon-owned PyPI account with real metadata and code.
|
|
39
|
+
Please contact Amazon supply chain support for the official SDK.
|
|
40
|
+
|
|
41
|
+
## For Amazon
|
|
42
|
+
|
|
43
|
+
This package name will be transferred to Amazon's ownership on request, at no cost.
|
|
@@ -0,0 +1,5 @@
|
|
|
1
|
+
amazon_ascs/__init__.py,sha256=UBfsjL3fIm0elyxw3NdoR1F4WyfdzrQMdJtHPxx2xo4,238
|
|
2
|
+
amazon_ascs-0.0.1.dist-info/METADATA,sha256=2Ey3FG4Q9afu_guNUSkPe0eeVgGLFgtrSQVAT3dpIYc,1982
|
|
3
|
+
amazon_ascs-0.0.1.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
|
|
4
|
+
amazon_ascs-0.0.1.dist-info/top_level.txt,sha256=Rao2PCsnhJZlLSBXf4UHRnXhoWNTFUChyWdJYt2PhDY,12
|
|
5
|
+
amazon_ascs-0.0.1.dist-info/RECORD,,
|
|
@@ -0,0 +1 @@
|
|
|
1
|
+
amazon_ascs
|